An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/afproxyhttp/init.php mishandles $_REQUEST["url"] in an error message.
[ { "events": [ { "introduced": "0" }, { "fixed": "2020-09-16" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25788.json"